What I try to implement is letting members upload and download group files, but can not read or write group objects. The default group Administrators & Members roles seem doesn't work like this way. How to customize the group policy, any hint or document I can refer to?